dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:77f0f20fb9cfe03f5ba336e267cf358532ce4c8a40c5659697e04032f768d436
Manifest digest:sha256:1dbf06b913a7084d8c9dd17f0f7119e957ad497a4cc0cc986466deb7ce655ffc
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:bd8d8cec30872606f0c5320695edc58bb28b6331d6a2c67a8cedcb589ee53695 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:c43ecd0edd287ecf25553b47b889bec3cc43dd14abeb31432933d2465b2cd805 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-proxy@sha256:ac4dd61116d6ca3058c363942ff732788ef28ae05d094a5a25b36d41719b881c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:742b142fd54ed26434f855b3269bc12720a0dd7f0eef69ec6c6d07c28a2107ec |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-proxy@sha256:3127e350f6224c271cf637f45f54e93e755e2e9a4a4932a4a8e63bf59dbbf56a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:3d4169be91985bb63ff62241a924a6c23b6f5b2db12ec6ed64c26ae540610e0a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:a5c8ffc3f2d8a5fbbadfd76cc9f5cf1208ae613a90e854528118cba55e876be3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:537ce00f9ace4b5adc46c3005f5fc2926c911b63c048496c28bd2dfd953a79f4 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:db0b81cf217599984f6bb33e6f0d60e6ca2de9bda9fa8b6c5a089ed8ef711544 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:38693297a24b08d5c25b788d9faf729cd3cc0dd8926694d61dde8efca58db72a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:89e8e84f26cc1e29ffeeb87ee26da8e8452c79eaa5517a6c4957992ea548293d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:bd750765cb0caab60263cc7d199b2eee4f8b690fc15fe585712b7d868ae5243f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:2c3fe0c4b50e78e157802fa6f067fe7e84bdc83c4ce6ced10361703b65fdbd2f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:d94b50eb59f3294715abda8e3a556a663380d1e3fdfca074872e556301cdf22b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:a71bf726598a2c9f50b2c39f8b94f24ee49ee9d933f643d67566a665558da323 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:60397d7b30bdcb6bace5b7e7c99f8e37f7baa5e615bc6ea8e53850e3f04f1ab4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:99ea84c97824aecb42c4cae0a247378485c23eecb4327234552bdf21ceb6e25f |